Examples of org.nasutekds.server.controls.ProxiedAuthV2Control

org.nasutekds.server.controls.ProxiedAuthV2Control
This class implements version 2 of the proxied authorization control as defined in RFC 4370. It makes it possible for one user to request that an operation be performed under the authorization of another. The target user is specified using an authorization ID, which may be in the form "dn:" immediately followed by the DN of that user, or "u:" followed by a user ID string.

      "cn: ProxyV2 Test",
      "givenName: ProxyV2",
      "sn: Test");


    ArrayList<Control> controls = new ArrayList<Control>(1);
    controls.add(new ProxiedAuthV2Control(
                          ByteString.valueOf("dn:cn=PWReset Target,o=test")));




    // Try to add the entry.  If this fails with the proxy control, then add it
    // with a root connection so we can do other things with it.

View Full Code Here

    // privileges the user actually has.
    boolean hasProxyPrivilege = conn.hasPrivilege(Privilege.PROXIED_AUTH, null);


    DN targetDN = DN.decode("cn=PWReset Target,o=test");
    ArrayList<Control> controls = new ArrayList<Control>(1);
    controls.add(new ProxiedAuthV2Control(
                          ByteString.valueOf("dn:" + targetDN.toString())));




    // Test a compare operation against the PWReset Target user.
    CompareOperationBasis compareOperation =

View Full Code Here

  }


  @Test
  public void testProcessedProxyAuthV2DeniedModify() throws Exception
  {
    ProxiedAuthV2Control authV2Control = new ProxiedAuthV2Control(
         ByteString.valueOf("dn:cn=nonexistent,o=test"));
    List<Control> controls = new ArrayList<Control>();
    controls.add(authV2Control);
    InvocationCounterPlugin.resetAllCounters();

View Full Code Here

  }


  @Test
  public void testProcessedProxyAuthV2Modify() throws Exception
  {
    ProxiedAuthV2Control authV2Control =
         new ProxiedAuthV2Control(ByteString.valueOf(
              "dn:cn=Directory Manager,cn=Root DNs,cn=config"));
    List<Control> controls = new ArrayList<Control>();
    controls.add(authV2Control);
    InvocationCounterPlugin.resetAllCounters();

View Full Code Here

  @Test
  public void testCompareProxiedAuthV2() throws Exception
  {
    InvocationCounterPlugin.resetAllCounters();


    ProxiedAuthV2Control authV2Control =
         new ProxiedAuthV2Control(ByteString.valueOf(
                  "dn:cn=Directory Manager,cn=Root DNs,cn=config"));
    List<Control> controls = new ArrayList<Control>();
    controls.add(authV2Control);


    CompareOperationBasis compareOperation =

View Full Code Here

  @Test
  public void testCompareProxiedAuthV2Denied() throws Exception
  {
    InvocationCounterPlugin.resetAllCounters();


    ProxiedAuthV2Control authV2Control = new ProxiedAuthV2Control(
         ByteString.valueOf("dn:cn=nonexistent,o=test"));
    List<Control> controls = new ArrayList<Control>();
    controls.add(authV2Control);


    CompareOperationBasis compareOperation =

View Full Code Here

    }


    ArrayList<Control> controls = new ArrayList<Control>();
    if (proxyAuthzID.isPresent())
    {
      Control c = new ProxiedAuthV2Control(
          ByteString.valueOf(proxyAuthzID.getValue()));
      controls.add(c);
    }


    AddRequestProtocolOp addRequest = new AddRequestProtocolOp(entryDN,

View Full Code Here

          {
            throw new DirectoryException(ResultCode.AUTHORIZATION_DENIED,
                           ERR_PROXYAUTH_INSUFFICIENT_PRIVILEGES.get());
          }


          ProxiedAuthV2Control proxyControl =
              getRequestControl(ProxiedAuthV2Control.DECODER);


          Entry authorizationEntry = proxyControl.getAuthorizationEntry();
          setAuthorizationEntry(authorizationEntry);
          if (authorizationEntry == null)
          {
            setProxiedAuthorizationDN(DN.nullDN());
          }

View Full Code Here

    Entry authorizationEntry;
    try
    {
      ProxiedAuthV1Control proxyControlV1 =
          operation.getRequestControl(ProxiedAuthV1Control.DECODER);
      ProxiedAuthV2Control proxyControlV2 =
          operation.getRequestControl(ProxiedAuthV2Control.DECODER);
      if(proxyControlV1 != null || proxyControlV2 != null)
      {
        // The requester must have the PROXIED_AUTH privilige in order to
        // be able to use this control.
        if (! clientConnection.hasPrivilege(Privilege.PROXIED_AUTH,
            operation))
        {
          operation.appendErrorMessage(
              ERR_EXTOP_WHOAMI_PROXYAUTH_INSUFFICIENT_PRIVILEGES.get());
          operation.setResultCode(ResultCode.AUTHORIZATION_DENIED);
          return;
        }


        if(proxyControlV2 != null)
        {
          authorizationEntry = proxyControlV2.getAuthorizationEntry();
        }
        else
        {
          authorizationEntry = proxyControlV1.getAuthorizationEntry();
        }

View Full Code Here

0 1

TOP

Related Classes of org.nasutekds.server.controls.ProxiedAuthV2Control

org.nasutekds.messages.Message

org.nasutekds.server.core.CompareOperationTestCase

org.nasutekds.server.core.PasswordPolicyState

org.nasutekds.server.core.TestModifyDNOperation

org.nasutekds.server.extensions.WhoAmIExtendedOperation

org.nasutekds.server.extensions.WhoAmIExtendedOperationTestCase

org.nasutekds.server.protocols.jmx.JmxPrivilegeTestCase

org.nasutekds.server.tools.StopDS

org.nasutekds.server.types.PrivilegeTestCase

org.nasutekds.server.workflowelement.externalchangelog.ECLSearchOperation

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.